tek.no

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1d:28:ee:3f:2b:58:25:05:19:3f:49:61:84:3d:20:61:64 was issued on by Let's Encrypt.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tek.no

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1d:28:ee:3f:2b:58:25:05:19:3f:49:61:84:3d:20:61:64
Serial Number (int): 271259452603697578757567073295692541747556
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8d:3c:db:11:af:b4:fb:6e:0f:4f:78:9a:d6:6c:7d:15:88:cd:6d:a8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 71:a9:89:f1:43:fe:ff:a8:9f:9e:c4:08:be:22:22:97:16:f2:fa:da
Fingerprint (sha256): 74:dc:8b:97:32:ff:63:ae:43:c4:38:73:db:f7:19:3a:ba:4b:33:d3:d5:29:4e:6d:af:78:55:1a:18:6a:02:60

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tek.no

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tek.no

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

auth.tek.no
min.tek.no
neo.tek.no
search.tek.no
static.tek.no
tek.no
www.tek.no

Other certificates including the domain name tek.no

(limited to 100 certificates)
cmp.aftenbladet.no
*.tek.no
id.aboutme.schibsted.com
cmp.aftenbladet.no
cmp.aftenbladet.no
tek.no
cmp.aftenbladet.no
tek.no
cmp.aftenbladet.no
id.tek.no
*.new.tek.no
cmp.aftenbladet.no
tek.no
cmp.aftenbladet.no
tek.no
cdn.tek.no
cmp.aftenbladet.no
auth.tek.no
ish.tek.no
id.tek.no
cmp.aftenbladet.no
cmp.aftenbladet.no
tek.no
cmp.aftenbladet.no
id.aboutme.schibsted.com
id.aboutme.schibsted.com
cmp.aftenbladet.no
tek.no
tek.no
tek.no
*.new.tek.no
cmp.aftenbladet.no
cdn-yams.new.tek.no
tek.no
id.aboutme.schibsted.com
new.tek.no
tek.no
cmp.aftenbladet.no
cmp.aftenbladet.no
cdn-yams.tek.no
cmp.aftenbladet.no
cmp.aftenbladet.no
tek.no
mail.tek.no
4.session-service.identity-pre.schibsted.com
tek.no
cmp.aftenbladet.no
*.tek.no
cmp.aftenbladet.no
cmp.aftenbladet.no
*.new.tek.no
tek.no
id.aboutme.schibsted.com
cmp.aftenbladet.no
cmp.aftenbladet.no
cmp.aftenbladet.no
cmp.aftenbladet.no
prisguide.tek.no
cmp.aftenbladet.no
tek.no
cmp.aftenbladet.no
id.aboutme.schibsted.com
cmp.aftenbladet.no
tek.no
cmp.aftenbladet.no
cmp.aftenbladet.no
tek.no
cmp.aftenbladet.no
cmp.aftenbladet.no
id.aboutme.schibsted.com
new.tek.no
tek.no
tek.no
tek.no
cmp.aftenbladet.no
cmp.aftenbladet.no
id.aboutme.schibsted.com
tek.no
cmp.aftenbladet.no
cmp.aftenbladet.no
new.tek.no
tek.no
tek.no
id.aboutme.schibsted.com
id.aboutme.schibsted.com
ish.tek.no
cmp.aftenbladet.no
cmp.aftenbladet.no
ish.tek.no
tek.no
id.aboutme.schibsted.com
tek.no
cmp.aftenbladet.no
tek.no
cmp.aftenbladet.no
cmp.aftenbladet.no
tek.no
new.tek.no
ish.tek.no
tek.no

Certificate

The complete raw certificate details for tek.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGlDCCBXygAwIBAgISAx0o7j8rWCUFGT9JYYQ9IGFkMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MjAwODA2MTBaFw0x
OTExMTgwODA2MTBaMBExDzANBgNVBAMTBnRlay5ubzCCAiIwDQYJKoZIhvcNAQEB
BQADggIPADCCAgoCggIBAPBEtg56Ag9rg8dy7RVYafOvRV1MM9eL2TPnU4UP/P8r
48L2P3QnZLEjNf26Q200K1rx9sahMpNYVuO/DV1WTNcMus3zPL1q9d0bvYlmCXAI
oklE/TszFB8HoRwNzrC1G+ti1fRd5n4Z6V1HmjNDROZF1her2NVOJC6EFfWKgP0N
v0VGFtNVJAsDd0Fxu/P0axHh7N5sIFu/bzDmiH7vc5NHOF1rSG10w/pjN5Z3ik9k
euETIGBE9ZQN5tGr1QITs6X37yrubVHzJOZRuHmSIi/5xkCSkMnIIulY8Im79x6o
C4xjGUeZhdyd3v8/9QmIovUengrS0alP9IdEi6FkhIcDwi3HghrGDX7e+fGsxvJu
qiMb0rV71Javdqx9uWOAdOloeGyrjTAXoQezzijCYiOzB+WquHCpNp5ZYXudi1Hs
xsXTNqZMP+SO4zWYLO2pfOF/825l+7mPOnRRQ0Lx2s3WBGv2AYD5E1WPFXV5N8HM
+UxwasJwUX8c+pqmrDS+s/W3CELNN4+l6FSV+h/lkOGm8PPSVXES/rzEuueu6G1S
oMYb0HgBTbsowEyCwFb8RsBz7rf0nbfLOtFGarfOYaccwaajNsyVcuAlogVY8jyM
/En8+xZuOkpeMpZuhVOPQ3YH9NNaqgOwyJLxHt9qnqs4rX5z8hbtPs17+y2kR3Uh
AgMBAAGjggKrMIICpzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH
AwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFI082xGvtPtuD094
mtZsfRWIzW2oMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsG
AQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNl
bmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNl
bmNyeXB0Lm9yZy8wYAYDVR0RBFkwV4ILYXV0aC50ZWsubm+CCm1pbi50ZWsubm+C
Cm5lby50ZWsubm+CDXNlYXJjaC50ZWsubm+CDXN0YXRpYy50ZWsubm+CBnRlay5u
b4IKd3d3LnRlay5ubzBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEB
ATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUG
CisGAQQB1nkCBAIEgfYEgfMA8QB2AGPy283oO8wszwtyhCdXazOkjWF3j711pjix
x2hUS9iNAAABbK5GyBwAAAQDAEcwRQIgQ/B44noaNvylNNIHErVwszAdISKUOF7o
h5GVR94cjoICIQD7yHtHuybrde3tdi/8Y+a9IZNxzFPKotkCZ4EK6vo8sQB3AG9T
dqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABbK5GyYEAAAQDAEgwRgIh
AP0yNPV2uIY0AJ90zs6yQ/gHzWNtSeBv0njNp2lPEEqnAiEAk/o7nBa1m63Z+Vhb
K+6hyPVeh2sR54FIeY62pRpJPZQwDQYJKoZIhvcNAQELBQADggEBAIF66edvEWI4
YdayS+VwQXj/zJ1CPC3LGScmzdVjaOMxGKcgu+lU1K2s/hS/MeKwZjX99pa9TWtE
VYHyNtlMRnNYAh29DuSircoDY6jMBCFwpp/5hE84QQH7hwjlcgN8g+hRyVVR3E5L
0fD3tdl1mqAyGR7U4eYpXwEgCd6THjqC1UW5jUm81l9gZqf8EmkWQZYM1Tr/bEIW
xOtfrAbX2LU++T216Wdk+AXrSP4E4Rnvfv6HVX3jpcDyU4xEMHm7cQma83sPlmkn
qyTpzANKbWmOpVDW1f+Ga4Ten3YNnoLY0rLnaC8kaavhPt67XDTfQONzs69hQqh7
Fvo+eOKwCeY=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271259452603697578757567073295692541747556
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-20 08:06:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-18 08:06:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tek.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 980209564878557620904429591930351340704795574073283481902324358574464983817390974883542902654564521923349860489832877370033033609629100702799577749758895080919139639232206773538256616534600105037704183952146886166739737780982520859769641134336685000257214099081787294451305039067686018287946800140661034582089088509321003857136367912918102347840807140113691657464245553526929499684622172626875518320441362562149630343522424589740745970522852709298773497704824943220602261778410178238378121057566425483301857937230811415018966877959354253167725184782297642048899021484289425853134447980480918778659585153546875280590154173777558054498045500283621974162281827052104459798492254156294067521553280974589676493071183646484364961330040146655711119615904094330296275513562610379713172176556779049701175635965501610529173222145023937846934017463821111830255176196456570224853260125487386740181616135035869101147804974975833740593750976032860626992274344996340312446155575554481995728625260159804092839502071083200318261717339922670483381565060667995909380296827872856322102955369220209383478134165381743819337975742713608348308363338199614257123473266218880255312177024255770960856201223358092538986773825080367655633965570707232131125835041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8d3cdb11afb4fb6e0f4f789ad66c7d1588cd6da8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.tek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'min.tek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neo.tek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.tek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.tek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tek.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tek.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016cae46c81c0000040300473045022043f078e27a1a36fca534d20712b570b3301d212294385ee887919547de1c8e82022100fbc87b47bb26eb75eded762ffc63e6bd219371cc53caa2d90267810aeafa3cb10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016cae46c9810000040300483046022100fd3234f576b88634009f74ceceb243f807cd636d49e06fd278cda7694f104aa702210093fa3b9c16b59badd9f9585b2beea1c8f55e876b11e78148798eb6a51a493d94
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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